This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/a9UUQvVUQnxe273U6aniMeuVSV8.roa File: a9UUQvVUQnxe273U6aniMeuVSV8.roa (raw, json) Hash identifier: 7vEXbXNqwlMSgJyfX4S5RjxAdbJ6vW8VHoOqOei233g= Subject key identifier: 6B:D5:14:42:F5:54:42:7C:5E:DB:BD:D4:E9:A9:E2:31:EB:95:49:5F Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b Certificate serial: 019B7910D61F0BF6E5EA3A47754CEB38E4A7 Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/a9UUQvVUQnxe273U6aniMeuVSV8.roa Signing time: Thu 01 Jan 2026 10:18:25 +0000 ROA not before: Thu 01 Jan 2026 10:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207163 IP address blocks: 185.164.88.0/22 maxlen: 22 2a0a:f400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d6:1f:0b:f6:e5:ea:3a:47:75:4c:eb:38:e4:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b Validity Not Before: Jan 1 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bd51442f554427c5edbbdd4e9a9e231eb95495f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:f9:e7:b1:f1:31:7f:34:0e:5f:6d:43:4c: ca:3a:60:50:ef:bd:47:4a:bb:c1:33:44:25:54:a8: 52:ac:23:86:ba:30:09:26:68:49:52:b3:18:ae:2e: 3f:10:09:d4:56:ee:a6:19:63:5e:fb:89:ca:8b:68: 53:5c:77:ce:60:f7:b6:b9:52:51:ad:e2:7c:09:53: 80:db:f5:01:16:d4:a0:e1:65:49:22:bf:86:26:51: e7:34:29:24:9f:c8:a0:ba:82:00:9e:68:08:19:aa: ff:06:fc:bd:c3:1f:f1:0e:50:b2:5a:e1:61:39:b3: 85:54:20:2c:19:34:84:2c:12:14:c5:dc:54:07:4d: 9f:a7:83:74:8d:f4:09:fa:c7:af:94:e3:b9:5a:73: a1:ec:2b:cb:78:b5:81:c6:f0:11:9a:72:de:05:32: b7:b7:64:a7:88:88:92:a6:3b:0b:b3:e2:3e:a3:77: 4f:6b:d7:22:ec:ce:90:33:c2:ee:3c:1a:81:bf:34: 6a:5b:09:0d:a3:7f:ca:ba:fd:98:44:8f:2b:43:75: 37:6e:5f:40:01:4c:33:8d:59:93:67:48:25:ed:a9: 53:b6:6f:70:5a:91:69:d1:83:0f:57:de:88:73:1e: c9:45:62:35:f0:91:98:6c:57:9b:37:e2:b6:41:6b: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D5:14:42:F5:54:42:7C:5E:DB:BD:D4:E9:A9:E2:31:EB:95:49:5F X509v3 Authority Key Identifier: keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/a9UUQvVUQnxe273U6aniMeuVSV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.88.0/22 IPv6: 2a0a:f400::/29 Signature Algorithm: sha256WithRSAEncryption 14:0a:60:a0:58:a7:03:3c:12:b7:49:28:b3:f2:69:af:29:3c: c0:10:75:29:62:e7:d5:da:62:5a:0f:e5:6e:cb:db:54:f1:f9: a2:3d:c8:1e:b4:d7:a8:9c:1c:71:f2:2c:5b:d7:08:2a:33:46: 1f:98:41:25:73:69:51:9c:cd:29:ab:ec:72:26:e8:74:be:ec: 51:6e:62:66:34:89:42:46:43:75:d9:b0:d2:f0:93:5b:b4:8e: 3d:17:38:a7:e4:50:35:c7:ba:87:07:61:af:78:74:1a:ba:f1: 1e:75:45:4c:a4:90:7b:10:b4:40:d3:4b:ee:0e:8f:98:ad:04: e8:16:e2:92:2c:07:88:e0:94:b6:32:48:01:61:2c:4a:de:b1: 1b:5b:ad:b8:35:db:af:f9:cd:14:ad:29:43:3f:89:48:96:39: 31:ff:84:43:29:fe:93:b2:6d:73:bc:94:64:c8:22:32:c1:f0: a2:c2:52:e1:49:7b:65:6c:55:24:39:04:d0:07:f9:a4:4e:e6: 34:13:8f:67:de:e7:67:e3:23:66:da:89:dc:0a:43:1b:15:42: 4e:89:50:b5:5e:42:53:54:35:03:fc:06:df:ac:fc:f7:4c:8b: b2:2c:31:6b:5c:15:47:10:cb:08:17:3b:5b:66:e9:c7:40:78: d3:ae:8b:9a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ENYfC/bl6jpHdUzrOOSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMGUzODA1YTFiNGY1YjYxY2ZlNzMwMTBlODM4YzJmMGQy NWI0NGIwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmQ1MTQ0MmY1NTQ0MjdjNWVkYmJkZDRlOWE5ZTIzMWViOTU0OTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK3557HxMX80Dl9tQ0zKOmBQ771H SrvBM0QlVKhSrCOGujAJJmhJUrMYri4/EAnUVu6mGWNe+4nKi2hTXHfOYPe2uVJR reJ8CVOA2/UBFtSg4WVJIr+GJlHnNCkkn8iguoIAnmgIGar/Bvy9wx/xDlCyWuFh ObOFVCAsGTSELBIUxdxUB02fp4N0jfQJ+sevlOO5WnOh7CvLeLWBxvARmnLeBTK3 t2SniIiSpjsLs+I+o3dPa9ci7M6QM8LuPBqBvzRqWwkNo3/Kuv2YRI8rQ3U3bl9A AUwzjVmTZ0gl7alTtm9wWpFp0YMPV96Icx7JRWI18JGYbFebN+K2QWu/FQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGvVFEL1VEJ8Xtu91Omp4jHrlUlfMB8GA1UdIwQY MBaAFOIOOAWhtPW2HP5zAQ6DjC8NJbRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kMTZlM2UtZWIwOS00ZmI5LTkwODEt YmQzZTdhZGRlOGRlLzEvYTlVVVF2VlVRbnhlMjczVTZhbmlNZXVWU1Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9kMTZlM2UtZWIwOS00ZmI5LTkwODEtYmQzZTdhZGRlOGRl LzEvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaRYMA0E AgACMAcDBQMqCvQAMA0GCSqGSIb3DQEBCwUAA4IBAQAUCmCgWKcDPBK3SSiz8mmv KTzAEHUpYufV2mJaD+Vuy9tU8fmiPcgetNeonBxx8ixb1wgqM0YfmEElc2lRnM0p q+xyJuh0vuxRbmJmNIlCRkN12bDS8JNbtI49Fzin5FA1x7qHB2GveHQauvEedUVM pJB7ELRA00vuDo+YrQToFuKSLAeI4JS2MkgBYSxK3rEbW624Nduv+c0UrSlDP4lI ljkx/4RDKf6Tsm1zvJRkyCIywfCiwlLhSXtlbFUkOQTQB/mkTuY0E49n3udn4yNm 2oncCkMbFUJOiVC1XkJTVDUD/AbfrPz3TIuyLDFrXBVHEMsIFztbZunHQHjTroua -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:26 2026 by rpki-client